Head of Security

As Head of Security, you'll define and drive Morpho's security strategy across the entire organization - corporate and IT, cloud and infrastructure, application, supply chain, identity, incident response, threat intelligence, and counterparty security - and you'll build the team and function to deliver it. This is a hands-on leadership role: in the early days you'll personally do the work while you hire, and you'll stay close enough to the technical detail to earn the trust of a deeply technical organization. You'll also be Morpho's credible security voice, internally to leadership, and externally to the integrators, institutions, and ecosystem partners who depend on us. You'll partner closely with Engineering on infrastructure and deployment integrity, and with our Integration team, which works with various partners across the Morpho ecosystem.

Responsibilities:

• Own and continuously evolve Morpho's security strategy and roadmap across corporate, cloud/infrastructure, application, supply-chain, identity, and operational security.
• Build and lead the security function - hire, grow, and develop the team, recruiting skillsets across security operations and application security.
• Stay hands-on. Personally execute critical security work - threat modeling, architecture review, control implementation, and incident command - while the team scales.
• Set the governance architecture: a coherent security framework that ties tooling and controls together, rather than accumulating tools in isolation.
• Own incident response end to end - runbooks, incident command, severity and escalation structure, and market communication during an event.
• Build and run a counterparty security program for curators and partners - identity verification, screening, operational diligence, and bidirectional incident-coordination channels.
• Lead Morpho's certification strategy (e.g. SOC 2, ISO 27001), meeting both the spirit and the letter sustainably.
• Represent Morpho's security posture externally - to fintechs, financial institutions, and the broader ecosystem - and internally to executives.
• Partner cross-functionally with Engineering, Protocol, and Integrations, driving security outcomes through both direct ownership and influence.